CVE-2025-14134CWE-119CWE-121

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflow

High · published December 6, 2025

CVSS v4.0
8.7
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

🚨 Remote attackers can exploit this stack-based buffer overflow vulnerability in Linksys repeaters with a simple argument manipulation — the definition of a nightmare! 🔥 Think of it like a waiter who takes a single order and instead of double-checking it, just blindly serves the dish without verifying its contents — one wrong ingredient and, oops, you've got a disaster on your hands! An attacker could take control of your device, potentially leading to unauthorized access to your network and data. This vulnerability leaves your home network open to exploitation, which could be absolutely devastating if they decide to sneak in and cause chaos. Your sensitive information may be at risk!

Put simply

Think of it like a waiter who takes a single order and instead of double-checking it, just blindly serves the dish without verifying its contents — one wrong ingredient and, oops, you've got a disaster on your hands! This vulnerability lies in the RE2000v2Repeater_get_wireless_clientlist_setClientsName function, where a malformed argument can trigger a stack-based buffer overflow, allowing an attacker to execute arbitrary code remotely.

What to do

An attacker could take control of your device, potentially leading to unauthorized access to your network and data. This vulnerability leaves your home network open to exploitation, which could be absolutely devastating if they decide to sneak in and cause chaos. Your sensitive information may be at risk! Update your Linksys repeater firmware to the latest versions if available: 1.0.013.002 or later for RE6500, RE6250, RE6300, RE6350, RE7000, and RE9000. Additionally, restrict access to your network to trusted devices only, and monitor for any unusual activity. 🛡️ You've got this! With quick action, you can secure your devices and keep your network safe from intruders! 💪✨

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.00870 · 58.4th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-12-06T11:02Z
EPSS history
Timeline
  • 06 DEC 11:02Z
    Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflow
    cvelistv5